Database security has followed the same playbook for years. Pick your ten or twenty most critical databases, deploy Imperva or Guardium on them, and take the eighteen-month, seven-figure hit. For the other several hundred databases, turn on native audit, ship the logs to your SIEM , and call it monitoring.